Dear Data Subject,
the protection of your personal data is essential to us and we are committed to providing you with a level of protection and security that complies with EU Regulation 2016/679. We therefore invite you to read the following information, which is valid for the collection and processing of data from you, including via the website www.florencebiennale.org.
1. DATA CONTROLLER
The owner of the processing of your personal data is the company Arte Studio S.r.l., with registered office in Via delle Porte Nuove, 10 - 50144 Florence (FI), Italy, registered at the register of economic activities (REA) of Florence with no. ____ C.F. and P.I.V.A. 05555400489, pec: firstname.lastname@example.org, regular e-mail: email@example.com.
2. DATA PROTECTION OFFICER
With regard to your personal data and the processing necessary for the proper execution and management of the relationship with you, the Data Controller does not carry out any regular or systematic monitoring or large-scale processing of the data, not even simply connected or ancillary to the main activities of the Data Controller. Consequently, no Data Protection Officer has been appointed in accordance with Article 37 EU Reg. 2016/679. For any information you can always contact the Data Controller at the following email address: firstname.lastname@example.org.
3. DATA COLLECTED, PURPOSE AND LEGAL BASIS FOR PROCESSING
The collection of your personal data is limited to the information strictly necessary to properly manage the service you have requested from the Controller.
We do not collect any other information from you, nor do we use the data collected for purposes other than those indicated in this policy. The interested party will always be kept up to date, by updating the Site and this policy, dedicated newsletters and special information in the private area, of any new and/or additional data collection or processing for different purposes.
We collect the following personal data directly from the data subject:
The legal bases of the aforementioned processing operations are: the express consent of the Data Subject for the sending of all informative newsletters, even if they do not contain commercial proposals; the sending, in telematic, digital or paper form, of advertising material relating exclusively to the products or services of the Data Controller, including any newsletters, (Art. 6, § 1, lett. a) of EU Reg. EU 2016/679); the execution of the contract of sale or provision of services established with the order by the Data Subject and the execution of any pre-contractual measures required by the same (e.g. pre-sales and post-sales communications, see. Art. 6, § 1, lett. b) of EU Reg. 2016/679); the fulfilment of legal obligations incumbent on the Data Controller, e.g. due to Italian anti-money laundering, tax and fiscal legislation (Art. 6, § 1, lett. c) of EU Reg. 2016/679).
Information for sending newsletters (first and last name, email address), the purpose of which is the activation and management of the newsletter service providing information on the Controller's activities, possibly also with commercial or promotional content.
Contact information (name and surname, personal details, email address, billing and shipping address, telephone number), the purpose of which is the management and execution of sales contracts with the Controller, including contacting the Data Subject, billing and delivering the products and services ordered, activating and making available to the Data Subject the customer care service. In addition to this, the collection and processing of personal data is also aimed at fulfilling the obligations provided for by Italian and European legislation, for example on anti-money laundering, tax or fiscal matters, as well as for the exercise of the rights of the Data Controller in judicial and extrajudicial proceedings. It should be noted that the communication of personal data constituting the Contact Information is necessary for the conclusion and execution of the sales contract and therefore, in the absence of such data, the Owner will not be able to follow up on the order placed on the Site by the interested party or contact the same to monitor the proper execution of all phases of the sale and delivery of the product purchased.
Artists' information (name and surname, pseudonym/name of art, gender, data and place of birth, residence, telephone number, email address, website, data relating to the type of artistic work carried out and examples of works created), the purpose of which is to screen the artist's candidature for participation in one or more exhibitions organised and curated by the Owner, to maintain contact with this particular category of Interested Parties, also for future exhibitions and activities of the Owner, to fully and completely execute the contract with the selected artists (e.g. exhibition and attribution of the work, formation of the catalogue, etc.). (e.g. exhibition and attribution of the work, formation of the catalogue, etc.). It should be noted that the communication of personal data constituting the Artists' Information is necessary for the conclusion and execution of the contract with the selected artists and therefore, in the absence of such data, the Owner will not be able to execute the contract itself. In addition to this, the collection and processing of personal data is also aimed at fulfilling the obligations provided for by Italian and European legislation, for example in the field of anti-money laundering, taxation or taxation, as well as for the exercise of the rights of the Owner in and out of court. The contact information of all artists, including those who are not selected, is also necessary in order to propose new exhibition opportunities to them.
We automatically collect the following data from the Data Subject with his/her explicit consent via a "banner" on the Site:
4. RECIPIENTS OF PERSONAL DATA
As a default rule, your personal data will not be disclosed, communicated or transferred to third parties and, on the contrary, will always be kept in a secure and confidential manner.
For the sole purpose of the correct performance of the services you have requested, and to the extent that this is strictly necessary, we will communicate your data to our suppliers for the correct performance of what you have requested, on the basis of the information provided by you (e.g. newsletter management). We will also disclose your data when required to do so by applicable law, for example, for tax purposes. We may need to disclose the data subject's data to third parties in the event of debt collection or defence of the Controller's rights.
In addition to the above, there are no plans to disseminate, transmit, communicate or transfer data outside of Italy.
5. DATA RETENTION PERIOD
The personal data of the interested party for the purpose of sending newsletters will be stored and processed for as long as the interested party wishes, until the request for cancellation.
The personal data of the interested party registered in the reserved area will be stored and processed for as long as the interested party wishes, until the request for cancellation.
The personal data of the interested party relating to the application and selection procedures of the artists will be kept and processed for the entire period of the selection and deleted at the end of the selection if the artist is not selected. However, contact data will be kept in order to allow the communication of new application and selection procedures, within a time limit of two years from the conclusion of the first selection procedure.
Following the reasoned and admissible request for cancellation of the data by the interested party, the Data Controller shall do so within and no later than 30 (thirty) days from receipt of the request.
In any case, the Data Controller shall keep all the documentation relating to the contracts entered into with the Data Subject, including tax documentation and documentation relating to the delivery of the goods ordered, for the periods of time required by Italian and European regulations. This period, as a rule, is equal to 10 (ten) years from the execution of the contract.
6. RIGHTS OF THE DATA SUBJECT
With reference to the personal data collected by the Data Controller on the Site, the Data Subject may exercise all the following rights:
Access to your personal data pursuant to Article 15 EU Reg. 2016/679. This right also includes the right to obtain a copy of the personal data collected and processed by the Data Controller. After verifying the legitimacy of the request, the Data Controller will release the requested information and a copy of the data. In the event of manifestly unfounded or excessive requests, also due to the repetition of the same, the interested party shall pay the Data Controller an appropriate expense contribution, to be compared to the administrative costs incurred by the Data Controller to process the request.
To request the rectification of their personal data pursuant to Article 16 EU Reg. 2016/679. The Data Controller shall communicate such rectification to any recipients of the personal data pursuant to Article 19 EU Reg. 2016/679, unless this is impossible or involves disproportionate efforts, it remaining the right of the Data Subject to know the identity of such recipients.
Request the deletion of their personal data (so-called right to be forgotten) pursuant to and within the limits established by art. 17 EU Reg. 2016/679. The Data Controller shall communicate such request for deletion to any recipients of the personal data pursuant to Article 19 EU Reg. 2016/679, unless this is impossible or involves disproportionate efforts, and the Data Subject has the right to know the identity of such recipients.
To request the restriction of the processing of their personal data pursuant to and within the limits established by Article 18 EU Reg. 2016/679. The Data Controller shall communicate such request for restriction to any recipients of the personal data pursuant to Art. 19 EU Reg. 2016/679, unless this is impossible or involves disproportionate efforts, it remaining the right of the Data Subject to know the identity of such recipients.
Opposing the processing of one's personal data pursuant to and within the limits of Article 21 of EU Reg. 2016/679. The Data Controller makes available in a prominent manner on the Site a special "banner" requesting the interested party's explicit consent to the processing of their data for direct and indirect marketing purposes and profiling of purchasing preferences.
To request the portability of their personal data, pursuant to and within the limits established by Article 20 EU Reg. 2016/679. The Data Controller reserves the right to verify the technical feasibility of transmission to another data controller indicated by the Data Subject on a case-by-case basis.
Without prejudice to the processing that has already taken place, you may revoke at any time the consent already given for the sending of commercial proposals, in electronic, digital or paper form, relating to and/or connected with the Controller's services and for the sending of advertising material relating exclusively to the aforementioned products or services or commercial communications, including the newsletter relating to the offers on the Site, as well as for the carrying out of market research, also aimed at assessing the degree of satisfaction of Users and Customers, (so-called "marketing" purposes), as well as for the profiling of purchasing preferences.
To lodge a complaint with a supervisory authority pursuant to Article 77 EU Reg. 2016/679.
The interested party may send its written requests concerning the exercise of its personal data rights to the Data Controller at the following addresses:
Arte Studio S.r.l.
The exercise of the aforementioned rights shall in no way affect the possibility for the Data Subject to re-register on the Site and, more generally, to use the services of the Controller.
7. REPORTING OBLIGATION FOR PUBLIC AID